{"as_of":"2026-08-08T21:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c1c4fb1af5acc87fe55fb5232f25cdbb34823c82e0d7334ec0e209f6507a1f05","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T22:49:02.747168Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.20576/citation-record","integrity":"/paper/2506.20576/integrity","json":"/paper/2506.20576/citation-record.json","paper":"/paper/2506.20576"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:12.835367Z","title":"A comprehen- sive systematic literature review on intrusion detection systems,","venue":null,"work_id":"49c5cfdf-6b72-4a4a-a1ab-988c0063e163","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.434086Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:70133af4b07fe7183a4a209d929826d9977b3ff60abf933e0c2b24986cb1322e","observation_id":"390ee41d-4794-4a04-a32c-9563cdb3b300","resolution":{"observed_at":"2026-08-06T22:49:12.973497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:12.549213Z","title":"A survey on data-driven network intrusion detection,","venue":null,"work_id":"550809cf-a651-4d82-af73-20a3c408814b","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.537265Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:c002151d536fe9b110c17bbc6d031498c868341b029883bad7dcf9f867aa83dc","observation_id":"dc638f54-1c51-4c1b-9382-58509deb7b4d","resolution":{"observed_at":"2026-08-06T22:49:12.674504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:12.259428Z","title":"Generative adversarial attacks against intrusion detection systems using active learning,","venue":null,"work_id":"0ee54ee8-d02e-4407-be2d-41423bc6daa1","year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.596044Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:a23f34316afa63cc87c78022578ecd7fcdc9b11d088ae5c776654e0d6ee592ae","observation_id":"73664678-d250-4220-922e-814618ca3879","resolution":{"observed_at":"2026-08-06T22:49:12.375589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T22:48:55.751196Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.751196Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:66beb54455e8cccbbe6f0d9470e6885c859cc8579e2cd49cda9ffbc4417656a8","observation_id":"9ee06155-e6f2-4c70-bdc0-235011fd1f83","resolution":{"observed_at":"2026-08-06T22:48:55.751196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:55.886974Z","title":"Adversarial examples: Opportunities and chal- lenges,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.886974Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:9dd52bc150edd7e20bf5facf2684abde5614bf6542fe9b7b9172186b8b53095e","observation_id":"d4586e27-60ad-4aa3-bb01-bc166ee726ef","resolution":{"observed_at":"2026-08-06T22:48:55.886974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.939420Z","title":"Bringing a gan to a knife-fight: Adapting malware communication to avoid detection,","venue":null,"work_id":"d60cfe5e-9eed-4b58-b44d-f7da67b7e6d1","year":2018},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.959360Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:1cdcfc6ed1cbebcdff5cdf099fe68c8852aefcde94bacd8f769e3bbd30e02c77","observation_id":"25b7413c-9da9-4ae9-bb02-7d9d9f07646e","resolution":{"observed_at":"2026-08-06T22:49:12.096376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.18736","last_updated":"2024-10-22T09:49:44Z","snapshot_observed_at":"2026-07-06T19:23:24.241057Z","submitted_at":"2024-09-27T13:27:29Z","title":"Adversarial Challenges in Network Intrusion Detection Systems: Research Insights and Future Prospects","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.18736","snapshot_observed_at":"2026-08-06T22:48:56.109272Z","title":"Adversarial challenges in network intrusion detection systems: Research insights and future prospects,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.109272Z"},"links":{"cited_paper":"/paper/2409.18736","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:c7321874a1f2fa83cb3e79f93b69a8592d4aa40d5abdb751b72b8616cacabcf8","observation_id":"b345d6ca-41ac-4696-a187-33121b21909b","resolution":{"observed_at":"2026-08-06T22:48:56.109272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.631230Z","title":"Modeling realistic adversarial attacks against network intrusion detection systems,","venue":null,"work_id":"e0ca944a-595e-493f-8f43-de265223f229","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.325061Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:4cf83ed0303c784f5aad2a74fb09e05de234e9f587cdaa743a615d94383b4189","observation_id":"26e47f4a-0acf-4fac-a9d1-932532a64c33","resolution":{"observed_at":"2026-08-06T22:49:11.777013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.339253Z","title":"A gradient- based approach for adversarial attack on deep learning-based network intrusion detection systems,","venue":null,"work_id":"4301ef0e-1e17-4a89-bb89-b13c92b473f3","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.433678Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:1ba090c661f9740ef882f70ade81b8f1146c8a7cf3b2f58f48361e44fb271abe","observation_id":"bf661ebe-6d7f-4cf1-9a95-5bd955e5a747","resolution":{"observed_at":"2026-08-06T22:49:11.461210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.024100Z","title":"Adversarial machine learning in network intrusion detection systems,","venue":null,"work_id":"d1d14d90-9edf-4bfe-85fb-75c929acca4f","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.569528Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:e6b377f2c8e38da9910c18447fc45f18d3aa7add9c52770588f130a562d9fa42","observation_id":"c50048d9-f00d-4855-bece-283887ca85f4","resolution":{"observed_at":"2026-08-06T22:49:11.201334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:10.777097Z","title":"Adversarial examples for network intrusion detection systems,","venue":null,"work_id":"7f19618c-56fe-490a-9faf-e17ee5d385f1","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.682656Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:70097a7c2ee6344115cbe5deafc7d63d0354ed158551ddc82b6944a50e0299a1","observation_id":"d0929150-1a9e-4a6d-b499-84b66211881f","resolution":{"observed_at":"2026-08-06T22:49:10.881922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:10.500935Z","title":"Adaptative perturbation patterns: Realistic adversarial learning for robust intrusion detection,","venue":null,"work_id":"29440291-0e5f-4902-81e7-21b034b25a53","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.851322Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:a517585b67fea2ccd354a7a0fbf897dcd00ee6203cc4b02c348134d3e35ea051","observation_id":"a4127ede-945f-4d04-aa36-b6c524235dbf","resolution":{"observed_at":"2026-08-06T22:49:10.622237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:56.973376Z","title":"Adversarial machine learning- industry perspectives,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.973376Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:29b2f6562b0059133a5d979ebc16c59c1968eb6e1e9ccc8d50dc5b6f70e16a68","observation_id":"e1c30c7a-0c80-4cc8-92c5-7b665a8f8e3a","resolution":{"observed_at":"2026-08-06T22:48:56.973376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:10.188719Z","title":"Survey on intrusion detection systems based on machine learning techniques for the protection of critical infrastructure,","venue":null,"work_id":"2f8c15da-ed50-41c6-b512-4b14329477cc","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.095951Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:396e085b35682f25f0a729624f51b7923d949d8ad5747376c9508dca0eb30c55","observation_id":"464dddf1-3e9c-4b6b-87dd-24ae8ad6fbfc","resolution":{"observed_at":"2026-08-06T22:49:10.327120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.253228Z","title":"Adversarial machine learning attacks against intrusion detection systems: A survey on strategies and defense,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.253228Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:b08403d222b341242e96d43e91636206b02124ac0781e817132ff0de9315fbca","observation_id":"7aeb2688-83ba-484e-802c-95e3a479979d","resolution":{"observed_at":"2026-08-06T22:48:57.253228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.875322Z","title":"Adversarial machine learning applied to intrusion and malware scenarios: a systematic review,","venue":null,"work_id":"59a3370d-5c46-4633-b5c1-90f28a3dc957","year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.384058Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:20bf88fa1060bd1fa26eaee08ea5933aea8d5040c4f3b740f4b8617c735b2118","observation_id":"7914913c-732f-4f5f-a381-2245bef12244","resolution":{"observed_at":"2026-08-06T22:49:10.058616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.547251Z","title":"A survey on the vulnerability of deep neural networks against adversarial attacks,","venue":null,"work_id":"4ad55cd4-e93e-40e6-ad3a-c85f5667801b","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.572988Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:ab89ef5f67f48240f008de7765a4db8e78dc1c7bf7166e543e2ed76c12e9563c","observation_id":"980c88c6-0fe1-4340-a98a-94556b94f6b1","resolution":{"observed_at":"2026-08-06T22:49:09.667349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.707687Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.707687Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:ebc8317beb59403c2e8f452c313228e819d96426afbd8fb41c923a05c57f45c6","observation_id":"b513cb4b-03cc-40ac-b86d-e8a9361a3311","resolution":{"observed_at":"2026-08-06T22:48:57.707687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.877777Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.877777Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:f9c9e26b26e301dc7547fb5c83386783b60d2a90f9a81428aed97dee24e6ab74","observation_id":"2fd2c7a9-e601-4a42-b503-2b9cf0074e6f","resolution":{"observed_at":"2026-08-06T22:48:57.877777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.986706Z","title":"Hopskipjumpattack: A query-efficient decision-based attack,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.986706Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:7847a718dbd7ea1de501d3714bc7151c513b9d4ff78d683dfa4ce756bcbd49fa","observation_id":"3e5df237-0b24-41c4-b326-6dc8cc5cb3ec","resolution":{"observed_at":"2026-08-06T22:48:57.986706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T22:48:58.118531Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.118531Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:cf0ba2135544896739ab8d0527d95a88fe67dbb746d2b85206ad94f3b2bf80e2","observation_id":"7f9c8402-2405-4df8-9c27-da7cedc4be98","resolution":{"observed_at":"2026-08-06T22:48:58.118531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.206568Z","title":"Improving adversarial ro- bustness via promoting ensemble diversity,","venue":null,"work_id":"ddf33032-962e-411d-b7f7-325e7dda9d54","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.214077Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:a4519afd744515ccfa6ab0c5160ef49ea674a55597e897a259c26aa282281fd1","observation_id":"98f4ded0-1ba4-4f35-8cd0-8a5e44d035da","resolution":{"observed_at":"2026-08-06T22:49:09.351678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1702.04267","last_updated":"2017-02-21T06:53:38Z","snapshot_observed_at":"2026-08-04T06:28:06.255085Z","submitted_at":"2017-02-14T15:44:26Z","title":"On Detecting Adversarial Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1702.04267","snapshot_observed_at":"2026-08-06T22:48:58.317947Z","title":"On detecting adversarial perturbations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.317947Z"},"links":{"cited_paper":"/paper/1702.04267","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:9d2ae86205e086f6cbd1b25d7a59af8609a60e8658fc5c1702d2ac6b0ca3d7d3","observation_id":"253e5838-3d61-4dfb-bf56-e3bebc283846","resolution":{"observed_at":"2026-08-06T22:48:58.317947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.001891Z","title":"Evaluating adversarial robustness of secret key-based defenses,","venue":null,"work_id":"41ce7d19-f3e3-41c2-a65d-70eb1439efa0","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.420399Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:e7365476856547777edf6cfce817c142c1434266bb617d89630f62e1cb9bbc24","observation_id":"8be3120a-f5c8-4b18-a7dc-6bd28035557f","resolution":{"observed_at":"2026-08-06T22:49:09.088942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.765983Z","title":"Adversarial attacks and defenses in image classification: A practical perspective,","venue":null,"work_id":"3369f03a-993c-439f-a84c-5ee6c4b3c878","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.524759Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:f680a68d3cf72d2e3f0ba693337dc542090e7e488c9e2de20b488f00a257bdd7","observation_id":"47c28566-3abe-45f8-b4b2-f02fcea8b19c","resolution":{"observed_at":"2026-08-06T22:49:08.876889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02613","last_updated":"2018-03-14T07:24:10Z","snapshot_observed_at":"2026-08-05T05:21:53.374752Z","submitted_at":"2018-01-08T18:54:40Z","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02613","snapshot_observed_at":"2026-08-06T22:48:58.635526Z","title":"Characterizing adversar- ial subspaces using local intrinsic dimensionality,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.635526Z"},"links":{"cited_paper":"/paper/1801.02613","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:a9f41e182f558cee1636666e66add0536ff0afc0c6a03f29acd5053a71077f3c","observation_id":"768bedd8-e18d-4c50-85cc-4241ebfd2398","resolution":{"observed_at":"2026-08-06T22:48:58.635526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.563194Z","title":"Query efficient black- box adversarial attack on deep neural networks,","venue":null,"work_id":"cf986a74-5e0b-46bd-89da-d8f928489a31","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.758773Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:ffee98d64f1004ac82fef0f3ceecc5e12b606c6c0e4d5c3650a73a25f2898d46","observation_id":"7e5b130f-4a71-40b1-962d-97800a57803b","resolution":{"observed_at":"2026-08-06T22:49:08.659007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.378769Z","title":"The logbarrier adversarial attack: making effective use of decision boundary information,","venue":null,"work_id":"307b2d1f-ca0b-414a-906b-a8598a4397bd","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.912194Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:47891556396450b838bbe65e56113e13500bca505bd60ac3f235335eed7dc52b","observation_id":"e35e39db-3b76-4484-82ba-2386f984fc4d","resolution":{"observed_at":"2026-08-06T22:49:08.476644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.084560Z","title":"Improving the robust- ness of adversarial attacks using an affine-invariant gradient estimator,","venue":null,"work_id":"df84fe6e-ab08-43bd-9023-06cce6cd143e","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.036816Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:2c23aa5cd89f263915c742ead524c764f3f9f6c31260cf7e52abb0b9c3c9836d","observation_id":"087f8c3b-9e9d-4e28-a341-e033f9d316b0","resolution":{"observed_at":"2026-08-06T22:49:08.201971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.820696Z","title":"Towards transferable targeted adversarial examples,","venue":null,"work_id":"d417d79a-e9c7-4319-bf86-61a3d5ef57cc","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.155906Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:30473451c65a57ae07d2bf5d9c86c7f49538507018c4114751c6de56115a19aa","observation_id":"7329dedc-ccb6-4e82-94fd-f813e593de30","resolution":{"observed_at":"2026-08-06T22:49:07.916140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.601707Z","title":"A complete list of all (arxiv) adversarial example papers,","venue":null,"work_id":"3c2cb51f-92fe-4a54-8b45-acf0926a43a7","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.227024Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:c5ec624350d7927f909cf1917acf93a60c6614a2b9a7d9d92ae1657328504349","observation_id":"c343bec9-698b-4f84-bfc9-ee8d7536d3a8","resolution":{"observed_at":"2026-08-06T22:49:07.722624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.374017Z","title":"Adver- sarial attacks on machine learning cybersecurity defences in industrial control systems,","venue":null,"work_id":"3228aec7-1bb7-4155-a3c9-b7d5e7a37f2b","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.326979Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:507aff324690b9cf61f01930ff05fe0702372958dcd22a5e57491b411f092911","observation_id":"9fa8cf17-ebc9-4a80-8bf3-d0fc58ee6ddd","resolution":{"observed_at":"2026-08-06T22:49:07.480180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.145525Z","title":"Untargeted white-box adver- sarial attack with heuristic defence methods in real-time deep learning based network intrusion detection system,","venue":null,"work_id":"719067d2-e9ef-4d4d-bcc9-4dfdb2f586e5","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.441043Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:2fda06a57fb7e3f4539e5fb56ed6d57abed50357487fc29a060596019a99639b","observation_id":"e589e07f-ec28-4783-93d5-edb9746400c8","resolution":{"observed_at":"2026-08-06T22:49:07.233682Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.918992Z","title":"Boosting robustness of network intrusion detection systems: A novel two phase defense strategy against untar- geted white-box optimization adversarial attack,","venue":null,"work_id":"920f8cc6-0313-4536-9178-6673557c536b","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.588390Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:8d4e78229397446e5c6e8243131ba9b3b206213662b086f08afb5013ccaf795b","observation_id":"8ca32139-f2d3-49c6-a5b3-7a8d8afcbd1e","resolution":{"observed_at":"2026-08-06T22:49:06.998363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.681603Z","title":"Defending network intrusion detection systems against adversarial evasion attacks,","venue":null,"work_id":"ac199087-84ee-43cd-9202-f2db15d43385","year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.729255Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:384fe5f90fdb2e4ffc0c683d774b27c4066db6ba0ff997487b02032411ecf934","observation_id":"e80cd6d9-6644-439b-99d2-390ad55d62ff","resolution":{"observed_at":"2026-08-06T22:49:06.797098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.439215Z","title":"Argan-ids: Adversarial resistant intrusion detection systems using generative adversarial networks,","venue":null,"work_id":"f5f2aa9d-345b-40c8-a065-55b947ae3782","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.883998Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:06bd66155e3606b3f425ce718d1e0e2b782350c57ef095020564e5c9599f7c77","observation_id":"650f2863-cfc1-42b8-a830-a6733ba3b350","resolution":{"observed_at":"2026-08-06T22:49:06.583958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.237701Z","title":"Adversarial attacks against deep learning-based network intrusion detection systems and defense mechanisms,","venue":null,"work_id":"162a7fc3-9a62-481f-b0c9-0046e93e0273","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.996503Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:d729691d8af03747dcd257394c1c48fd24b563c0904b40adacd37be843a8449d","observation_id":"5887aae7-19b9-40c7-95de-67747c2ecdca","resolution":{"observed_at":"2026-08-06T22:49:06.317294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.998816Z","title":"Adversarial attack against dos intrusion detection: An improved boundary-based method,","venue":null,"work_id":"e618208e-dd09-4e3e-8ebe-97a76680dbc1","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.133210Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:e70ba9dc8e165396109e65a255cf484ba0608693e3a62b32caa7c608456513d3","observation_id":"8a26f087-3cd1-43a9-8f67-3601c269bd13","resolution":{"observed_at":"2026-08-06T22:49:06.093876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.863180Z","title":"Evading machine learning botnet detection models via deep reinforcement learning,","venue":null,"work_id":"5aa4448b-3ae7-41ee-aad2-dadaa147c700","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.295302Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:270eee6a957dac8f41de11f95582133a249a8bc4334ff35acbbbf57675a265ce","observation_id":"c94e679a-3a73-488a-9611-ef01509f5462","resolution":{"observed_at":"2026-08-06T22:49:05.931225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.685541Z","title":"Tantra: Timing-based adversarial network traffic reshaping attack,","venue":null,"work_id":"11f9bd40-8c04-4afd-8309-8f2066b0cd1f","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.419504Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:edb3682156c026d999fff38381372b6eeeb1caa51f8554b162bb31607452f438","observation_id":"7869a959-4cb8-4063-be37-e871c599fc34","resolution":{"observed_at":"2026-08-06T22:49:05.746495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.543839Z","title":"Adv-bot: Realistic adversarial botnet attacks against network intrusion detection systems,","venue":null,"work_id":"19f292ff-732d-4ec8-83e7-4eebe5f7b224","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.558934Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:55a5b913a1ee0f11f22592f33efc7201258748a5f03bc8037110f99998734574","observation_id":"089eb51c-985a-4cfd-92c4-5e35cbf05d7f","resolution":{"observed_at":"2026-08-06T22:49:05.600125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.366029Z","title":"Idsgan: Generative adversarial networks for attack generation against intrusion detection,","venue":null,"work_id":"fc1b485d-3d3a-4d7b-b46f-2f18add9a3e8","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.674836Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:d764b8887f74bc92c8e80d691a56fda0ec15b8dd7aabc8615db04253144e134a","observation_id":"1cd80266-442e-4d73-a302-7110742b4144","resolution":{"observed_at":"2026-08-06T22:49:05.427874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.204107Z","title":"Black-box adversarial transferability: An empirical study in cybersecurity perspective,","venue":null,"work_id":"d132ec7b-9d89-4d2d-86c9-94f79f371f69","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.817868Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:0073d6bc14d5eccedd1e24e4a1cd91486a7987eee421fc6e941dcadf44e192a5","observation_id":"a69deb41-975c-46e4-b2ee-ad2a11ee8d4e","resolution":{"observed_at":"2026-08-06T22:49:05.282618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.054820Z","title":"Toward transferable adversarial attacks against autoencoder-based network intrusion detectors,","venue":null,"work_id":"b709e774-f448-4236-a570-e69c41da4c4e","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.962345Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:8ed9afa7bbe5e4583e788ccca643b891296543c65996ec5fe7d051c2813bb41a","observation_id":"caff6795-7265-4c02-ba1e-dd7bff2f2b4d","resolution":{"observed_at":"2026-08-06T22:49:05.113716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.845522Z","title":"Nids-vis: Improving the gen- eralized adversarial robustness of network intrusion detection system,","venue":null,"work_id":"a68b7bb0-a5d5-472b-a35c-7183c6e90222","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.094773Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:7d1d96ef80aecac05bcac4482cd8a589eee5425ba0d45c5cd30e7784f96746e0","observation_id":"39d0d207-7c33-42ca-a9af-f7339209a596","resolution":{"observed_at":"2026-08-06T22:49:04.951171Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.06694","last_updated":"2022-03-13T16:00:09Z","snapshot_observed_at":"2026-08-04T22:33:17.758585Z","submitted_at":"2022-03-13T16:00:09Z","title":"Generating Practical Adversarial Network Traffic Flows Using NIDSGAN","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.06694","snapshot_observed_at":"2026-08-06T22:49:01.254692Z","title":"Generating practical adversarial network traffic flows using nidsgan,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.254692Z"},"links":{"cited_paper":"/paper/2203.06694","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:93875ca3dd2aad5a9ec92e6a68468b9813296537812659eef4e7b93cb43995d5","observation_id":"74281f78-f9dc-4f6c-9015-79209cee4a64","resolution":{"observed_at":"2026-08-06T22:49:01.254692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.599700Z","title":"Multiple change-point detection: a selective overview,","venue":null,"work_id":"2cad1eec-ef31-4e84-beaa-5bad2abd2c00","year":2016},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.452312Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:d3323536682879f1e4e798bbf32391a42e7f01645228a52a000ec284780e4b10","observation_id":"3f98e37e-c3a8-4549-8ed7-c02e223d446b","resolution":{"observed_at":"2026-08-06T22:49:04.725291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.376629Z","title":"Seeded binary segmenta- tion: a general methodology for fast and optimal changepoint detection,","venue":null,"work_id":"e815bc13-ecbf-439a-bae6-91c8ac7e2d4d","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.582759Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:845dfcb9a036d2fe0bed3c496d26f0b9a5fa58ac90ec98bc1ee04f57b43fa99e","observation_id":"7f75bbc0-3109-4c66-91e8-f401963a3e90","resolution":{"observed_at":"2026-08-06T22:49:04.474377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:01.723610Z","title":"Causal inference for time series,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.723610Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:ca5358ceef32fac8843fb6f039e7c0191791c573e4277713283387d4d0f9ab06","observation_id":"ada7ea49-f0f2-4b77-8619-e2c21c3ae21f","resolution":{"observed_at":"2026-08-06T22:49:01.723610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.086709Z","title":"Ordinary least-squares (ols) model,","venue":null,"work_id":"daca5506-3e68-4829-bcf2-297c6b8ed516","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.842366Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:fe52f7c9392ef6e056469d0f056dc15f22aa96f9e8a12903f5f0d5388275e0d0","observation_id":"e9d3af97-02aa-4f3a-98fb-56c42a838db9","resolution":{"observed_at":"2026-08-06T22:49:04.242382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.808641Z","title":"Extracting the variance inflation factor and other multicollinearity diagnostics from typical regression results,","venue":null,"work_id":"cb69b4be-4cf4-43fe-a911-d4830f440d80","year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.964080Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:2b1b9740ca919981c0258f66ece4c263e8ce75e92c72a93d72c8af3c1f86091c","observation_id":"eb669993-d7d8-4b3d-b117-d1089175c6c7","resolution":{"observed_at":"2026-08-06T22:49:03.921042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:02.073356Z","title":"Deep isolation forest for anomaly detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.073356Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:c6cbd68cd87d2d6dcad797daab630205f4bc36e390a5b3e861b0b4ac123ef8ef","observation_id":"18e818e6-c707-4202-b73a-eb1718a5657c","resolution":{"observed_at":"2026-08-06T22:49:02.073356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.10773","last_updated":"2020-02-14T01:44:07Z","snapshot_observed_at":"2026-07-06T08:24:05.808457Z","submitted_at":"2019-09-24T09:27:08Z","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.10773","snapshot_observed_at":"2026-08-06T22:49:02.191727Z","title":"Sign- opt: A query-efficient hard-label adversarial attack,","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.191727Z"},"links":{"cited_paper":"/paper/1909.10773","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:64ecb3067710c40e8d7baddd776a1b8a97b463e0705031e1c29dedb4fd4aea41","observation_id":"6d7a1022-1698-4b9e-a0aa-4d7820d7508b","resolution":{"observed_at":"2026-08-06T22:49:02.191727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.535495Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"ef91024a-b43e-40ff-a189-00837a1d434d","year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.366993Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:3817adddc159c5ce98c85d5f2b83c96cc1b39facfdf735d019137e05e43f835c","observation_id":"fe622020-75d5-44e2-99d0-7ab97411836d","resolution":{"observed_at":"2026-08-06T22:49:03.673568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-07-06T06:13:56.299732Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-06T22:49:02.511616Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.511616Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:e35c33b88c8f8928a4fc3625bbbde17fb3b77a7c2acb04dff3c47500fa7dc168","observation_id":"ba99617f-b446-48cb-b0d6-6a9cb955fac5","resolution":{"observed_at":"2026-08-06T22:49:02.511616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.294026Z","title":"Genattack: Practical black-box attacks with gradient- free optimization,","venue":null,"work_id":"f79324fa-5e7f-4782-985c-3e2342940091","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.639242Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:afb7f0fb8d79dbe4b71de4352cee71604e75cd675d381505981cb565c05cea29","observation_id":"ec2581d9-2451-4fc6-93e0-fb735c1cb218","resolution":{"observed_at":"2026-08-06T22:49:03.416692Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.066082Z","title":"Evolu- tionary algorithms,","venue":null,"work_id":"be72b27d-bef7-4878-b647-3ec57c8d218d","year":2014},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.747168Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:f5de058cbcb2eded139ab5c4af0b1bfb53971443f44cc319255793d47289105c","observation_id":"b8514a4a-2f8a-4ba0-935e-c70e7210b41a","resolution":{"observed_at":"2026-08-06T22:49:03.173183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T22:42:51.475629Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":41},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2506.20576."}